$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: wND65rb4yc+ylct+0ao10/jzxnRguoh0flRz6C2F9SQ= Subject key identifier: AD:97:7F:EF:F8:75:B9:5A:17:8B:EB:44:7A:3C:CC:CE:08:B3:1F:91 Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: 01B4 Signing time: Mon 21 Jul 2025 03:11:23 +0000 Manifest this update: Mon 21 Jul 2025 03:11:23 +0000 Manifest next update: Mon 28 Jul 2025 03:11:23 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: 2a0Z27g32xT5hYfqR0cW/mSaYUz/iJmbIHGfBB9bAA4=) 2: 1EF2D862C9F511ED8771C865C4F9AE02.roa (hash: EksXJqRj0KH07WsHueUwybeZ3O7OwOE6F+VFPhINzRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: Jul 21 03:11:23 2025 GMT Not After : Jul 28 03:11:23 2025 GMT Subject: CN=687dafdb-06c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8a:c2:cd:d2:ec:0a:be:f3:a6:1f:cd:12:ed: a1:a7:17:86:6c:f3:2d:33:63:fe:bf:94:12:84:34: e9:10:dd:fd:ed:78:45:a5:31:b0:26:c3:17:72:de: 3c:0d:e1:2a:27:f7:77:1d:61:88:e3:8e:c8:c5:bc: cf:f2:f3:e5:56:f8:76:2e:60:51:e8:57:e3:90:e8: 3c:69:e7:f4:e4:38:f0:05:05:f2:65:d1:a8:10:ae: e3:62:42:8e:e0:a7:72:f1:e0:32:72:a3:0b:92:f4: b6:3d:77:71:7f:79:6c:a7:c6:98:2a:6f:0d:90:31: 18:e9:9f:f0:df:4d:d0:2c:3e:aa:8a:ac:97:cf:fe: e4:99:bd:e8:02:fb:ab:50:af:a8:84:76:9a:bb:99: 3e:9c:7f:29:93:f5:fb:79:e0:d2:ad:50:02:b2:50: 24:cc:8f:1e:7c:f4:44:3b:ab:64:2c:fc:d7:60:d3: 4e:b9:31:09:f4:08:ab:09:8e:14:b5:8c:59:55:66: 1c:a5:f3:f9:ed:b2:4a:57:f2:66:86:ae:82:4a:d8: 0c:c5:54:e0:e8:bc:35:e6:3c:05:d8:dd:59:ff:3b: 00:7b:a8:4a:10:90:2a:96:04:80:1d:96:58:ed:fa: 9a:90:4d:a9:3d:8a:68:4f:55:12:19:02:3f:44:f8: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:97:7F:EF:F8:75:B9:5A:17:8B:EB:44:7A:3C:CC:CE:08:B3:1F:91 X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:49:41:9c:f3:bf:bf:03:26:93:01:a6:0f:0d:34:0c:b0:62: b3:83:df:c7:02:05:5f:6f:42:17:1f:77:08:1d:43:98:55:cb: 2f:bb:ac:d9:17:ae:b7:fc:b9:40:7a:3c:e1:33:b5:4f:11:a3: 66:66:b4:38:f0:8d:1c:46:8a:bf:56:f1:08:c0:06:bc:f0:3a: 6d:cf:76:ef:1e:c3:fa:17:97:60:63:73:9a:db:2d:71:5f:80: e3:51:ae:d6:49:67:41:ea:45:e5:64:dc:04:71:47:39:68:78: b9:9b:0f:8f:74:7b:df:41:92:c2:f5:51:4f:2e:c6:60:30:ea: e9:d4:97:05:ea:4b:75:a7:61:fd:ae:e6:ad:13:5c:bb:95:01: 5d:ef:dc:16:22:e3:14:9c:6f:27:f4:bc:40:ba:2a:c9:0d:9b: 38:2a:4d:fe:bf:1c:d0:04:ce:65:49:8b:ad:1d:92:29:f1:d2: 45:84:a5:75:43:c3:4a:53:37:4f:e9:49:42:78:40:a9:ca:21: f1:97:85:40:93:24:91:df:ae:e5:98:86:f4:8d:a6:9d:06:fc: da:05:5e:cd:45:e7:1a:6c:ba:57:cc:0a:40:91:65:95:5c:14: 38:98:67:1e:41:fb:f9:69:60:72:b8:5f:41:6d:ee:43:ff:dd: b2:eb:a4:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjUwNzIxMDMxMTIzWhcNMjUwNzI4MDMxMTIzWjAYMRYwFAYD VQQDEw02ODdkYWZkYi0wNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6orCzdLsCr7zph/NEu2hpxeGbPMtM2P+v5QShDTpEN397XhFpTGwJsMXct48 DeEqJ/d3HWGI447IxbzP8vPlVvh2LmBR6FfjkOg8aef05DjwBQXyZdGoEK7jYkKO 4Kdy8eAycqMLkvS2PXdxf3lsp8aYKm8NkDEY6Z/w303QLD6qiqyXz/7kmb3oAvur UK+ohHaau5k+nH8pk/X7eeDSrVACslAkzI8efPREO6tkLPzXYNNOuTEJ9AirCY4U tYxZVWYcpfP57bJKV/Jmhq6CStgMxVTg6Lw15jwF2N1Z/zsAe6hKEJAqlgSAHZZY 7fqakE2pPYpoT1USGQI/RPgKsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2Xf+/4 dblaF4vrRHo8zM4Isx+RMB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5SUGc87+/AyaTAaYPDTQMsGKzg9/HAgVfb0IXH3cIHUOYVcsvu6zZ F663/LlAejzhM7VPEaNmZrQ48I0cRoq/VvEIwAa88Dptz3bvHsP6F5dgY3Oa2y1x X4DjUa7WSWdB6kXlZNwEcUc5aHi5mw+PdHvfQZLC9VFPLsZgMOrp1JcF6kt1p2H9 ruatE1y7lQFd79wWIuMUnG8n9LxAuirJDZs4Kk3+vxzQBM5lSYutHZIp8dJFhKV1 Q8NKUzdP6UlCeECpyiHxl4VAkySR367lmIb0jaadBvzaBV7NRecabLpXzApAkWWV XBQ4mGceQfv5aWByuF9Bbe5D/92y66SH -----END CERTIFICATE-----Generated at Mon Jul 21 12:30:08 2025 by rpki-client